Azure Devops Agent没有创建服务端点的权限（如何分配权限）

Question

As part of our release pipeline we're attempting to create a service endpoint using the rest api . we're using a powershell script to call the endpoint. This script is run in a Powershell Pipeline Task.

To call the endpoint, we use the oAuth token provided to the Agent via the variable ( $env:SYSTEM_ACCESSTOKEN )

by checking the agent configuration option:

Unfortunately, when the endpoint is called this token doesn't seem to have permission to create the service endpoint. If i hard code my own PAT, this call succeeds.

The Create Service Connection task is the powershell task that runs the script our powershell function Create-ServiceConnection from module file Vsts-ServiceConnection.psm1

The error message is very well descriptive but the difficulty is finding how do i allocate permissions that will be provided to the Agents oAuth token?

Answer 1

UPDATE:

after finding this answer VSTS: Using System.AccessToken to create a service endpoint

i added the permission to the "Project Collection Build Service" and it worked!